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Thousands of information-technology professionals now hold the lofty title of chief information officer, though many are no 
more than de facto chief technology officers. Why? Many ClOs have insufficient power to be truly accountable for the management 
of information. Contributing to the power vacuum: a lack of generally accepted standards or regulatory requirements comparable to 
those for chief financial officers. The Department of Defense, for one, recognized that shortcoming and issued a directive on May 2 
that strengthens the authority of its ClO. A checklist, synthesized by Baseline contributor Paul A. Strassmann from the 14-page direc- 
tive, provides a tool for companies to assess whether their ClOs have sufficient power to effectively perform their jobs. That checklist 
includes 15 “must-have” responsibilities and nine "should-have" duties. 

INSTRUCTIONS: If you answer “No” to more than one must-have responsibility, your ClO will be hobbled; if you check 

“No” to two or more should-have duties, he or she will have a terrific title but limited effectiveness. 


MUST-HAVE RESPONSIBILITIES 


Serves on executive committee; e.g., reports to the CEO or COO. 


Delivers strategic and operating plans that show how information technology supports corporate objectives; 
e.g.; presents plans for board approval. 


Acts as a corporate strategist and initiates studies to identify new investment opportunities; e.g., belongs to 
financial-investment and business-planning committees. 


Has sign-off approval as well as termination authority over technology plans and expenditures. 
Authorizes investigations or performance verification activities; e.g., reports findings to the board’s audit committee. 
Sets policies for evaluating standards and technology performance; reports periodically to the board. 


Maintains full accountability for information security assurance, including compliance with regulatory and 
industry standards. 


Performs risk assessment of information systems’ reliability, integrity, ease of recovery, and capabilities 
under extreme conditions. 


Defines the information architecture to specify which functions are central, what is distributed and what is 
outsourced; sets systems engineering governance and migration policy. 


s(') Maintains repository of business models that describe business operations in a standard format. 
Prescribes the execution of data management and data standardization policies. 


4 Ensures the interoperability of computers integrated into products or services provided to customers as a direct 
cost of goods sold; publishes an evaluation of systems integration capabilities and opportunities. 


ey Reviews all major programs, including exception reviews of at-risk projects; issues status reports. 
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§ Oversees training and career development of information-technology professionals; publishes an assessment of 
technology staffers. 


Initiates surveys of customer satisfaction with technology services; briefs top executives on evaluations. 


ANSWER NO TO ANY OF THE ABOVE, AND YOU ARE SETTING YOUR CIO UP FOR FAILURE. 


SHOULD-HAVE RESPONSIBILITIES 
y Provides oversight for non-l.T. but information-related business and administrative processes. 
@ Exercises control over records management and non-digital document archives. 
Establishes policies for document printing, control and distribution. 
3, Supervises the issuing and monitoring of secure access passwords, including encryption keys. 
Extends the scope of the CIO position to include voice, data, wireless, video and satellite communications. 
Maintains a consolidated inventory of information assets, including hardware, software and communications. 


4 Cultivates competitive-intelligence knowledge to provide insights into circumstances that businesses may use 
to their advantage. 


Identifies opportunities for companywide gains from internal, vendor or academic sources. 
Monitors and evaluates information costs, including quality of service from suppliers and customers. 


ANSWER NO TO 2 OR MORE OF THE ABOVE, AND YOUR CIO WILL HAVE LIMITED SUCCESS. 
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